This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.cer
File: 1FE06FF6B1883A9B111B67DE697E266A58B2646B.cer (raw, json)
Hash identifier: Ss41qSGDPqj8wdZdQjd1DttquaJCf7RhqHVqom2s4CA=
Subject key identifier: 1F:E0:6F:F6:B1:88:3A:9B:11:1B:67:DE:69:7E:26:6A:58:B2:64:6B
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 20A5A8FECAE10F8C69ED3BC285C14A0072A6E04E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 23:25:27 +0000
Certificate not after: Tue 26 Jan 2027 23:30:27 +0000
Subordinate resources: IP: 2801:1b:f800::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a5:a8:fe:ca:e1:0f:8c:69:ed:3b:c2:85:c1:4a:00:72:a6:e0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 23:25:27 2026 GMT
Not After : Jan 26 23:30:27 2027 GMT
Subject: CN=1FE06FF6B1883A9B111B67DE697E266A58B2646B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:23:e2:d1:99:7e:6e:6a:dd:ef:d4:6d:12:9c:
52:e9:3b:c4:d5:2e:1c:0a:29:41:79:b0:95:1e:97:
73:0a:69:65:06:ea:cf:1e:45:ea:c0:88:9e:b8:33:
21:8e:13:91:2e:7b:7c:0d:26:a4:e3:80:cb:07:01:
80:52:45:04:9d:22:fb:f4:d0:d8:9c:b0:06:37:02:
b8:dc:49:2b:93:a6:13:e0:c5:b3:ef:e4:8b:5d:36:
04:8e:46:98:66:2c:90:58:0f:60:ed:e1:ed:7a:0a:
30:12:a5:0a:79:1d:7f:22:64:f9:22:27:28:d1:6d:
b1:91:16:5a:d4:d1:7a:b9:84:5c:9b:fd:39:43:b0:
bb:ec:8e:6c:c2:dc:b7:01:dc:5e:d7:3e:10:f8:92:
f1:40:a9:be:3e:f9:6a:d6:87:2c:64:9d:7a:b7:b5:
a1:5d:62:b9:cd:98:7f:57:f7:e0:66:1f:ac:0f:83:
34:82:4d:31:f2:d4:49:a8:2f:65:26:99:d1:23:bd:
f9:10:4a:87:f3:d1:18:93:b9:ca:5e:16:5f:88:48:
2b:6b:7b:db:c1:ec:af:cd:a2:9e:00:a6:40:e2:b1:
94:fa:3d:1a:78:67:f3:30:83:d0:89:dd:72:b7:fc:
88:7a:2d:ce:68:92:74:c6:75:3d:04:0a:e0:ae:fb:
51:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1F:E0:6F:F6:B1:88:3A:9B:11:1B:67:DE:69:7E:26:6A:58:B2:64:6B
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/991B8A8B10C30A46AD32BA2E2A11BE288356E02D55EE57C731456004AD597B5E/0/1FE06FF6B1883A9B111B67DE697E266A58B2646B.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1b:f800::/48
Signature Algorithm: sha256WithRSAEncryption
88:af:f8:58:6b:19:c5:37:c3:b3:95:59:64:8e:ec:0f:4f:90:
3a:28:ce:83:f3:76:3c:ec:c6:cb:b7:72:22:78:a1:9f:06:c5:
9b:8b:b4:a6:3d:e4:be:0b:72:d6:63:62:ed:a4:64:0b:d2:cd:
21:8b:70:5c:bf:1b:2f:31:f8:4f:6a:8b:a5:ac:03:fb:47:d4:
46:87:d2:ff:05:cd:d7:d2:3f:59:e9:31:3e:7e:ad:86:c5:e8:
f4:51:49:9b:ac:28:a4:1f:0b:58:e4:09:6c:2e:e9:10:a3:c8:
fa:6e:43:8d:b1:0f:f6:57:a7:fd:d2:01:83:2d:b3:81:47:24:
d7:f0:8b:e4:d6:b2:84:dd:fa:e8:9b:dd:34:f1:3b:61:d2:5a:
3d:cb:40:71:e4:b7:87:ca:7c:e4:2f:71:a2:ed:ce:23:4b:ed:
3e:b7:8d:c8:92:9f:59:ba:2d:da:c1:40:ea:d7:1f:98:98:55:
32:66:a3:ae:60:6a:fe:c9:5a:51:27:70:c9:1f:7a:91:e5:44:
56:77:77:ec:99:bb:df:db:8f:29:60:af:cb:e2:50:72:a8:6e:
80:4c:f4:9c:3a:a5:2b:c3:cf:8a:c9:34:a2:18:9a:03:ce:5f:
a8:6c:17:af:2b:d5:cb:d0:2c:8e:d7:77:1d:f6:30:e7:7d:a6:
e4:77:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:14:34 2026 by rpki-client